{ "model_version": "0.3.1-draft.1", "schema_version": "0.2", "status": "experimental proposal", "updated_at": "2026-10-20", "canonical_url": "https://www.openkedge.io/downloads/concerted-engineering-model.json", "source": "OpenKedge repository: docs/insights/concerted-engineering-model.json and its versioned document set", "definition": "Concerted Engineering is a proposed AI-native coordination and control layer that complements adaptive product development, continuous delivery, and modern operational practices.", "positioning": "Its proposed differentiator is the linkage of machine-readable intent, enforced execution authority, independent evidence, artifact-bound admission and continuous outcome reconciliation. Net benefit remains a hypothesis.", "contracts": [ { "id": "intent", "name": "Intent Contract", "definition": "Customer evidence, outcome hypotheses, behavioral acceptance criteria, and hard invariants owned by Product and Engineering.", "question": "What must be true?", "owner": "Product and Engineering" }, { "id": "execution", "name": "Execution Contract", "definition": "Authenticated principal, delegation, allowed effects, isolation, network access, resource limits, and recovery owned by Engineering and Platform.", "question": "What may change?", "owner": "Engineering and Platform" }, { "id": "evidence", "name": "Evidence Contract", "definition": "Independently owned required checks, protected harnesses, trusted identities, thresholds, and finite freshness limits. This is a policy, not observed results.", "question": "What independent checks are required?", "owner": "Independent Verification" } ], "lifecycle": [ "Discover", "Define", "Execute", "Verify", "Deliver", "Learn" ], "canonical_roles": [ "Product Manager", "Software Engineer", "Verification Owner", "Principal Engineer", "Engineering Leader", "Agent", "Stakeholder", "Operations Owner" ], "documents": { "standard": { "url": "https://www.openkedge.io/downloads/concerted-engineering-standard-v0.1.md", "sha256": "92b60b86deff3b7fd9148ac6afa1ebbecb1f73a72863e8efe38d957cd98311f9", "companion_path": "/downloads/contract-standard-v0.1.md" }, "pilot": { "url": "https://www.openkedge.io/downloads/concerted-engineering-pilot.md", "sha256": "a9ba9ab3bda7529016c1ec471bc575af7310b335b989ef139d6bd75454cf246e", "companion_path": "/downloads/90-day-adoption-blueprint.md" }, "metrics": { "url": "https://www.openkedge.io/downloads/concerted-engineering-metrics.md", "sha256": "58ebccd9c29bf340f43d678c512722c4089dba5bcb0e8b269dc671637e7b33b0", "companion_path": "/downloads/metric-definitions.md" }, "implementation": { "url": "https://www.openkedge.io/downloads/concerted-engineering-implementation.md", "sha256": "7faf76b98898fbff1b99048e33da282075eac3815127ab0d2470cd66d1d6df00", "companion_path": "/downloads/implementation-guide.md" }, "governance": { "url": "https://www.openkedge.io/downloads/concerted-engineering-governance.md", "sha256": "3247e5ad91a7fdd29564355981f494241a00375ac60c6294cc0eb4e27054ddaf", "companion_path": "/downloads/governance-guide.md" }, "assurance": { "url": "https://www.openkedge.io/downloads/concerted-engineering-assurance.md", "sha256": "b06d03440f1551f801911cc96a2b95aae3d6476d454ca4deb75d9e85339931c9", "companion_path": "/downloads/assurance-guide.md" }, "claims": { "url": "https://www.openkedge.io/downloads/concerted-engineering-claims.md", "sha256": "2ce2be77cbfb9eea244320147aa01adab8bbc1aad1f8aec85a51e0fce185e31c", "companion_path": "/downloads/claims-register.md" } }, "metrics": [ { "id": "contract-hours", "name": "Contract authoring and maintenance hours", "definition": "Human effort to create, review, reconcile, amend, retire, and regenerate views of contracts and ADR links.", "formula": "sum(person_minutes for category=contract)/60; report initial vs upkeep and record kind separately", "unit": "person-hours per initiative/change tier and reporting period", "collection": "Append-only session start/pause/resume/done timestamps linked to change, owner and tier; reconcile with editor/review history and report idle/untracked coverage. No content or keystroke capture. Manual corrections retain provenance.", "cadence": "Weekly; baseline and intervention", "gaming": "Unlogged edits or moving contract work into coding categories. Include rejected attempts; report coverage.", "limits": "This is a subset of coordination effort and total labor, not an extra charge to add twice.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "contract-drift", "delivery-lead-time" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Unlogged edits or moving contract work into coding categories. Include rejected attempts; report coverage.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "contract-cost-share", "name": "Contract cost share", "definition": "Share of total human effort spent on contract work.", "formula": "100 × contract_hours / all_in_scope_human_hours", "unit": "percent; undefined when denominator is zero", "collection": "Same exclusive-category time ledger, including discovery, execution, review, operations, and maintenance.", "cadence": "Weekly by task/risk tier", "gaming": "Omitting upkeep or comparison-team documentation work. Apply the same categories in both groups.", "limits": "A lower share alone is not success; inspect outcomes and absolute hours.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "outcome-rate" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Omitting upkeep or comparison-team documentation work. Apply the same categories in both groups.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "verified-outcome-cost", "name": "Total cost per verified outcome", "definition": "All observed cost of work assigned to a cohort, including failed or abandoned attempts, divided by independently verified outcomes in that cohort.", "formula": "(sum(person_hours × declared_loaded_hourly_rate) + model + compute + infrastructure + integration_cost) / verified_outcome_count", "unit": "declared currency/outcome; report total costs when count=0", "collection": "Ledger, billing exports, CI usage, and independently approved outcome records. Allocate shared setup using a preregistered rule; disclose raw costs and allocation.", "cadence": "Monthly and at each outcome horizon", "gaming": "Excluding failures, optimistic future amortization, or redefining an outcome. Keep the cohort and outcome rule fixed.", "limits": "Do not pool tiers with different horizons. Contract time is included once, within total labor.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "outcome-rate", "escaped-defects" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Excluding failures, optimistic future amortization, or redefining an outcome. Keep the cohort and outcome rule fixed.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "discovery-latency", "name": "Discovery latency", "definition": "Time from logged, evidence-backed customer problem to accepted initial Intent revision.", "formula": "accepted_intent_at − problem_logged_at", "unit": "calendar hours; report median, p90/p95 when supported and open ages", "collection": "Product research/evidence log and immutable contract acceptance event; log entry when evidence is received, not at drafting completion.", "cadence": "Weekly", "gaming": "Delaying problem entry or excluding unresolved problems. Audit intake timestamps and show incomplete cases.", "limits": "Unlike full delivery lead time, this ends at intent agreement.", "type": "input", "owner": "Product Manager", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Delaying problem entry or excluding unresolved problems. Audit intake timestamps and show incomplete cases.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "outcome-rate", "name": "Realized outcome rate", "definition": "Share of due outcome commitments meeting their preregistered customer criterion at their contracted horizon; aliases include 90-Day Realized Value Rate and Outcome Realization.", "formula": "100 × commitments meeting criterion / all commitments whose horizon elapsed in the cohort", "unit": "percent, with horizon, numerator and denominator", "collection": "Outcome registry with frozen criteria, telemetry queries and independent review; missing due evidence counts as not demonstrated. Pending windows are reported separately.", "cadence": "At the registered horizon; monthly cohort review", "gaming": "Choosing short horizons, moving due dates or dropping failures. Freeze scope/horizon; report withdrawals and missing evidence.", "limits": "90 days applies to longer product bets, not every bug fix; compare only like horizons and risk tiers.", "type": "output", "owner": "Product Manager", "paired_with": [ "verified-outcome-cost", "escaped-defects" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Choosing short horizons, moving due dates or dropping failures. Freeze scope/horizon; report withdrawals and missing evidence.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "delivery-lead-time", "name": "Intent-Ready-to-production lead time", "definition": "Elapsed time from the accepted Intent Ready transition to first actual production exposure linked to that initiative; admission alone does not end the clock.", "formula": "p50 and p85(production_exposed_at - intent_ready_at), by risk/complexity cohort", "unit": "calendar hours; full distributions and open ages", "collection": "Versioned Intent Ready event, admission record and actual deployment/feature-flag exposure telemetry; retain original initiative ID across supersession.", "cadence": "Collect continuously; monthly output review with weekly input diagnostics", "gaming": "Restarting the clock after rework or counting merge as production. Keep original and amendment timestamps.", "limits": "Report time to full rollout separately and include incomplete/abandoned work. Schema 0.2 changes the start from approval to Intent Ready and the endpoint from admission to actual production exposure; do not pool incompatible definition versions.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "rework-tax" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Restarting the clock after rework or counting merge as production. Keep original and amendment timestamps.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "review-latency", "name": "Review and verification latency", "definition": "Elapsed time from a candidate becoming review-ready under the registered rule to a final independent evidence/admission decision.", "formula": "decision_at − review_ready_at; separately sum active_reviewer_minutes/60", "unit": "calendar hours and active reviewer person-hours", "collection": "PR events, protected CI/evidence receipts and time ledger, joined by candidate ID; record retries and rejected candidates.", "cadence": "Weekly", "gaming": "Marking ready late, splitting PRs, or hiding failed checks. Fix readiness criteria and report queue/retry distributions.", "limits": "Queue elapsed time and human verification burden are different measures.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "mutation-score" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Marking ready late, splitting PRs, or hiding failed checks. Fix readiness criteria and report queue/retry distributions.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "decision-latency", "name": "Decision latency", "definition": "Time from a complete trade-off request entering the decision queue to a recorded owner decision.", "formula": "decision_recorded_at − request_logged_at", "unit": "calendar hours, by risk and decision type", "collection": "Timestamped decision-request log and accepted decision/waiver records. Preserve incomplete-request and completion events.", "cadence": "Weekly", "gaming": "Declaring requests incomplete to hide waiting or rushing decisions. Audit resets and subsequent reversal reasons.", "limits": "Compare Type 1 and Type 2 decisions separately; do not reward speed alone.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Declaring requests incomplete to hide waiting or rushing decisions. Audit resets and subsequent reversal reasons.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "rework-tax", "name": "Organizational rework tax", "definition": "Share of human effort repeating or discarding prior work because recorded intent, dependencies, or decisions were misunderstood or changed.", "formula": "100 × classified_rework_hours / all_in_scope_human_hours", "unit": "percent and person-hours", "collection": "Exclusive-category time ledger with linked cause codes; weekly peer sample reviews classify necessary learning separately.", "cadence": "Weekly", "gaming": "Relabeling rework as discovery or blaming individuals. Publish cause rules and category coverage.", "limits": "Rework is not every refactor; maintenance with planned value is not automatically waste.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Relabeling rework as discovery or blaming individuals. Publish cause rules and category coverage.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "coordination-overhead", "name": "Coordination overhead", "definition": "Human effort spent on synchronization, contract upkeep, handoffs, approvals, and reconstructing context.", "formula": "100 × sum(exclusive coordination categories hours) / all_in_scope_human_hours", "unit": "percent and person-hours", "collection": "Consented calendar samples with linked-work tags and observed participation, reconciled with review/session traces. Count each participant once and distinguish active discussion from waiting; record corrections and sampling coverage. No individual ranking or sole reliance on retrospective self-report.", "cadence": "Weekly", "gaming": "Skipping necessary conversations or moving coordination to unlogged chat. Sample logs; pair with defects and developer feedback.", "limits": "Useful collaboration is still counted; the objective is net benefit, not zero coordination.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Skipping necessary conversations or moving coordination to unlogged chat. Sample logs; pair with defects and developer feedback.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "coordination-output", "name": "Coordination-to-output ratio", "definition": "Coordination effort required for one independently verified customer or maintenance outcome in a fixed cohort.", "formula": "coordination_hours / verified_outcome_count", "unit": "person-hours/outcome; undefined when count=0", "collection": "Coordination ledger joined to outcome registry; use the same cohort and horizon as total cost.", "cadence": "Monthly at the outcome horizon", "gaming": "Splitting one outcome into many or omitting abandoned work. Freeze outcome definitions and preserve full cohort.", "limits": "This is a diagnostic decomposition of total cost, not a separate score to optimize.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Splitting one outcome into many or omitting abandoned work. Freeze outcome definitions and preserve full cohort.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "metric-toil", "name": "Metric-induced engineering toil", "definition": "Effort collecting, correcting, and presenting measurement data that would not otherwise be needed to deliver or operate the service.", "formula": "sum(person_minutes with measurement_only tag)/60; also 100 × hours / total_human_hours", "unit": "person-hours and percent", "collection": "Ledger and measurement pipeline issue log; distinguish automated collection setup from recurring corrections and reporting.", "cadence": "Weekly", "gaming": "Treating reporting as free or hiding manual corrections. Audit export jobs and recurring reports.", "limits": "A subset of total human effort; one primary work category plus tags avoids double-counting.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Treating reporting as free or hiding manual corrections. Audit export jobs and recurring reports.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "priority-stability", "name": "Priority stability", "definition": "Share of initiatives in a frozen weekly commitment list with no unplanned cancellation, goal change, or drop below their committed priority band.", "formula": "100 × unchanged_baseline_initiatives / all_baseline_initiatives", "unit": "percent per week; report interruptions separately", "collection": "Append-only weekly priority snapshot and change log with reason/owner; new urgent items are logged as interruptions, not silently substituted.", "cadence": "Weekly", "gaming": "Choosing a vacuous baseline or avoiding justified reprioritization. Record rationale, new urgent demand, and customer effects.", "limits": "Adaptation can be correct. This diagnoses churn rather than rewarding rigidity.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "outcome-rate", "decision-latency" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Choosing a vacuous baseline or avoiding justified reprioritization. Record rationale, new urgent demand, and customer effects.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "adr-durability", "name": "ADR durability", "definition": "Elapsed accepted life of a decision before explicit supersession, with still-active decisions treated as right-censored observations.", "formula": "superseded_at − accepted_at; active age = cutoff_at − accepted_at", "unit": "calendar days; lifetimes, active ages and reasons", "collection": "Versioned ADR log with acceptance/supersession events and reason codes; audit modified history.", "cadence": "Monthly", "gaming": "Keeping bad decisions alive or omitting supersessions. Include reversal quality and changed assumptions.", "limits": "Report all active/censored decisions; a mean of completed lifetimes alone is biased. Longer is not inherently better.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "decision-latency", "escaped-defects" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Keeping bad decisions alive or omitting supersessions. Include reversal quality and changed assumptions.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "transition-recovery", "name": "Stakeholder transition recovery", "definition": "Time from a declared ownership handover to the successor passing a predefined context-and-authority readiness review.", "formula": "readiness_review_passed_at − handover_at", "unit": "calendar days, with review checklist revision", "collection": "Ownership registry, access grant log, handover checklist and independent reviewer event.", "cadence": "Per transition", "gaming": "Easy checklists or delaying handover entry. Register the checklist and preserve failed attempts.", "limits": "Do not infer retention or delivery improvement from this measure alone.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Easy checklists or delaying handover entry. Register the checklist and preserve failed attempts.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "focus-ratio", "name": "Deep focus time ratio", "definition": "Share of observed working time in uninterrupted blocks of at least the registered duration; duration is declared before collection.", "formula": "100 × qualifying_block_minutes / observed_work_minutes", "unit": "percent; disclose duration and observation coverage", "collection": "Voluntary diary or consented calendar sampling; exclude leave and off-hours using the same rules for both groups.", "cadence": "Weekly aggregate", "gaming": "Blocking calendars without focused work or avoiding needed collaboration. Pair with voluntary feedback; no individual ranking.", "limits": "The earlier >3-hour example is not a universal threshold; protect privacy and report aggregate coverage.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Blocking calendars without focused work or avoiding needed collaboration. Pair with voluntary feedback; no individual ranking.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "retention", "name": "Voluntary talent retention", "definition": "Share of the starting eligible employee cohort that has not voluntarily left by the review date.", "formula": "100 × (starting_cohort − voluntary_leavers) / starting_cohort", "unit": "percent; cohort count and observation duration", "collection": "Authorized aggregate HR records with fixed eligibility and departure categories; no personal data in public reports.", "cadence": "Six and twelve months", "gaming": "Reclassifying exits or changing the starting cohort. Disclose exclusions and organizational changes.", "limits": "Compensation, management changes and labor markets confound attribution.", "type": "output", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Reclassifying exits or changing the starting cohort. Disclose exclusions and organizational changes.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "restore-time", "name": "Time to restore service", "definition": "Time from customer-impact incident start to restoration of the registered service objective; this is the defined MTTR variant here.", "formula": "service_restored_at − customer_impact_started_at", "unit": "calendar minutes by severity; distributions and unresolved ages", "collection": "Incident timeline and SLO telemetry, reconciled by the incident owner after review.", "cadence": "Per incident; monthly summary", "gaming": "Moving incident start or declaring restoration early. Preserve detection time and original timeline.", "limits": "Do not mix time to detect, repair, resolve, and restore under one MTTR label.", "type": "input", "owner": "Engineering Leader", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Moving incident start or declaring restoration early. Preserve detection time and original timeline.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "escaped-defects", "name": "Escaped-defect severity", "definition": "Production defects attributed to the release cohort after admission.", "formula": "count(defects) by preregistered severity; optionally count/100 deployments within the same tier", "unit": "counts and defects/100 deployments; no undisclosed severity weights", "collection": "Incident/defect tracker joined to deployment IDs; independent triage against a versioned severity rubric.", "cadence": "Per event; weekly and six-/twelve-month follow-up", "gaming": "Downgrading severity, missing slow defects or changing attribution. Audit samples and publish exposure windows.", "limits": "Report severity strata and unresolved attribution instead of one favorable weighted average.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "delivery-lead-time", "mutation-score" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Downgrading severity, missing slow defects or changing attribution. Audit samples and publish exposure windows.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "rollback-severity", "name": "Rollback severity", "definition": "Rollbacks and failed recoveries attributed to a release cohort, classified by customer impact and recovery difficulty.", "formula": "count(rollbacks) by severity; count/100 deployments within the same tier", "unit": "counts and rollbacks/100 deployments, with impact duration", "collection": "Deployment/rollback events joined to incident records and the registered impact rubric.", "cadence": "Per event; monthly", "gaming": "Avoiding a necessary rollback or relabeling it a hotfix. Include forward fixes and failed recovery attempts.", "limits": "A timely low-impact rollback can be a healthy control; interpret with customer impact.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Avoiding a necessary rollback or relabeling it a hotfix. Include forward fixes and failed recovery attempts.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "error-budget", "name": "Error-budget burn", "definition": "Observed bad-event fraction relative to the bad-event fraction allowed by the registered SLO.", "formula": "(bad_events / eligible_events) / (1 − SLO_target)", "unit": "dimensionless burn ratio per declared time window", "collection": "Versioned SLO and telemetry query; retain traffic exclusions, window, and event counts.", "cadence": "Continuous alerts; weekly review", "gaming": "Changing eligibility or SLO targets after seeing results. Version queries and thresholds before intervention.", "limits": "Undefined if eligible_events=0 or SLO_target=1. Report missing data; do not treat it as zero burn.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Changing eligibility or SLO targets after seeing results. Version queries and thresholds before intervention.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "code-survival", "name": "Two-week code survival", "definition": "Fraction of eligible added executable lines from a release still present after 14 days under a fixed diff/move-detection rule.", "formula": "100 × surviving_eligible_added_lines / eligible_added_lines", "unit": "percent with diff algorithm and eligible-line count", "collection": "Git history joined to deployed commits; exclude generated/vendor code under preregistered rules.", "cadence": "14 days after deployment", "gaming": "Preserving useless code or avoiding healthy deletions. Inspect deletion reasons and maintenance cost.", "limits": "Diagnostic only; deletion can be good and code movement changes the result.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "rework-tax", "outcome-rate" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Preserving useless code or avoiding healthy deletions. Inspect deletion reasons and maintenance cost.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "mutation-score", "name": "Mutation score", "definition": "Fraction of non-equivalent, successfully executed mutants killed by a protected test suite.", "formula": "100 × killed_mutants / (killed_mutants + surviving_mutants)", "unit": "percent plus counts of invalid, timed-out, excluded and equivalent mutants", "collection": "Protected mutation runner with operator, harness and test-input versions; equivalence exclusions require owner review.", "cadence": "Per applicable candidate; weekly trend", "gaming": "Choosing weak operators or excluding survivors. Freeze operator policy and audit exclusions.", "limits": "Context-specific coverage signal, not a universal quality score or proof of correctness.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "contract-hours" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Choosing weak operators or excluding survivors. Freeze operator policy and audit exclusions.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "contract-drift", "name": "Contract drift", "definition": "Required record links or derived views inconsistent with the exact governing revisions at inspection time.", "formula": "100 × stale_or_missing_required_links / inspected_required_links", "unit": "percent plus unresolved drift count and age", "collection": "Automated reference/digest validation and sampled human semantic review against a registered link inventory.", "cadence": "Per candidate and daily deployed-state review", "gaming": "Reducing the inventory or checking only syntax. Freeze required link types and report semantic-review coverage.", "limits": "Digest equality detects version drift; it does not establish that a requirement is correct.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "contract-cost-share" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Reducing the inventory or checking only syntax. Freeze required link types and report semantic-review coverage.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "policy-exceptions", "name": "Policy exception volume", "definition": "Requested, accepted, rejected, expired and unresolved waivers/emergency exceptions for the release cohort.", "formula": "count(exception_records) by status and rule; accepted_count/100 admitted_deployments", "unit": "counts, exceptions/100 deployments and unresolved age", "collection": "Append-only waiver, incident and admission logs joined by exact artifact and environment.", "cadence": "Per admission; weekly", "gaming": "Using informal overrides or closing exceptions without checks. Reconcile privileged-access events against the exception log.", "limits": "Rising counts may reflect better reporting; investigate scope and severity, not count alone.", "type": "guardrail", "owner": "Verification Owner", "paired_with": [ "escaped-defects", "review-latency" ], "anti_gaming": "Report coverage, raw denominators and workload/tier mix; investigate unexplained changes. Using informal overrides or closing exceptions without checks. Reconcile privileged-access events against the exception log.", "evidence_floor": "E2 for a published local observed result; E3 requires a preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "translation-share", "name": "Translation share of lead time", "type": "input", "owner": "Engineering Leader", "definition": "Share of delivery lead time spent reconstructing or reconciling inconsistent/missing shared meaning across artifacts. Useful audience-specific rendering and analysis are not automatically waste.", "formula": "100 × union_duration(translation_intervals) / (production_exposed_at - intent_ready_at)", "unit": "percent; undefined for nonpositive lead time", "collection": "Workflow state transitions joined to the approved Intent and first admission; merge overlapping intervals before summing. Tag corrective reconciliation separately from purposeful projection/analysis work; retain both in total labor, and disclose coding disagreements.", "cadence": "Weekly", "gaming": "Moving wait outside instrumented states or approving intent late.", "limits": "Report state coverage, intent count/size and parallel-work attribution. Schema 0.2 aligns its window to Intent Ready through actual production exposure; do not pool earlier approval/admission cohorts. The numerator excludes useful projection work unless a registered review establishes corrective reconstruction; retain the definition version.", "paired_with": [ "delivery-lead-time", "escaped-defects" ], "anti_gaming": "Report missing observations, denominators and the listed gaming vectors; never use for individual evaluation.", "evidence_floor": "E2 for published local observations; E3 for preregistered comparative claims with caveats.", "claim_id": "CE-METRIC-01" }, { "id": "verification-wait", "name": "Verification wait", "type": "input", "owner": "Verification Owner", "definition": "Elapsed queue time from candidate-ready event to independent verification start, distinct from active check/review duration.", "formula": "p50 and p85(verification_started_at - candidate_ready_at), by tier", "unit": "hours", "collection": "Candidate and protected verifier events; preserve rejected and incomplete candidates.", "cadence": "Weekly", "gaming": "Delaying ready events or omitting rejected candidates.", "limits": "Right-censor unfinished waits; report sample size and clock rules.", "paired_with": [ "escaped-defects", "mutation-score" ], "anti_gaming": "Report missing observations, denominators and the listed gaming vectors; never use for individual evaluation.", "evidence_floor": "E2 for published local observations; E3 for preregistered comparative claims with caveats.", "claim_id": "CE-METRIC-01" }, { "id": "developer-experience", "name": "Developer experience pulse", "type": "guardrail", "owner": "Engineering Leader", "definition": "Team aggregate responses on focus time, intent clarity, trust in checks, toil and intent to stay.", "formula": "per-question response distribution; no individual composite ranking", "unit": "ordinal distribution and response count", "collection": "Voluntary five-question pulse; suppress small groups under the preregistered privacy rule.", "cadence": "Quarterly", "gaming": "Coerced responses, nonresponse bias and identifying small groups.", "limits": "No individual evaluation; report response coverage and never infer causality from the pulse alone.", "paired_with": [ "metric-toil", "retention" ], "anti_gaming": "Report missing observations, denominators and the listed gaming vectors; never use for individual evaluation.", "evidence_floor": "E2 for published local observations; E3 for preregistered comparative claims with caveats.", "claim_id": "CE-METRIC-01" }, { "id": "check-flakiness", "name": "Check flakiness", "owner": "Verification Owner", "type": "guardrail", "definition": "Inconsistent verdicts on identical immutable inputs under the same declared harness/environment.", "formula": "inconsistent rerun verdict sets / all eligible rerun sets", "unit": "fraction; undefined without eligible reruns", "collection": "Protected runner repeated-run events joined to exact artifact/harness/environment; report sampling policy.", "cadence": "Per calibration/record; weekly aggregate review", "gaming": "Selecting easy seeds/controls or drafts; omitting failed attempts or unknown results.", "anti_gaming": "Freeze versioned inclusion rules; report all eligible cases, missingness and source coverage; no individual ranking.", "limits": "Sample- and configuration-specific. No statistical independence, general correctness or causal benefit follows from this metric alone.", "paired_with": [ "review-latency", "escaped-defects" ], "evidence_floor": "E0 for synthetic exercises; E2 requires a recorded local baseline; E3 requires preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "seeded-catch-rate", "name": "Seeded-defect catch rate", "owner": "Verification Owner", "type": "guardrail", "definition": "Known realistic sandboxed defects rejected by a specific verifier configuration; report clean-control false positives separately.", "formula": "caught_seed_ids / all_valid_seed_ids, by defect class and configuration", "unit": "fraction and raw counts", "collection": "Independently curated seed catalog, run receipts, catch/miss outcomes and representative-sampling limits.", "cadence": "Per calibration/record; weekly aggregate review", "gaming": "Selecting easy seeds/controls or drafts; omitting failed attempts or unknown results.", "anti_gaming": "Freeze versioned inclusion rules; report all eligible cases, missingness and source coverage; no individual ranking.", "limits": "Sample- and configuration-specific. No statistical independence, general correctness or causal benefit follows from this metric alone.", "paired_with": [ "verifier-false-positive", "escaped-defects" ], "evidence_floor": "E0 for synthetic exercises; E2 requires a recorded local baseline; E3 requires preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "verifier-false-positive", "name": "Verifier false-positive rate", "owner": "Verification Owner", "type": "guardrail", "definition": "Known clean calibration controls rejected by a verifier configuration.", "formula": "rejected_clean_controls / all_valid_clean_controls", "unit": "fraction and raw counts", "collection": "Independent clean-control catalog and protected calibration results.", "cadence": "Per calibration/record; weekly aggregate review", "gaming": "Selecting easy seeds/controls or drafts; omitting failed attempts or unknown results.", "anti_gaming": "Freeze versioned inclusion rules; report all eligible cases, missingness and source coverage; no individual ranking.", "limits": "Sample- and configuration-specific. No statistical independence, general correctness or causal benefit follows from this metric alone.", "paired_with": [ "seeded-catch-rate", "review-latency" ], "evidence_floor": "E0 for synthetic exercises; E2 requires a recorded local baseline; E3 requires preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "draft-edit-survival", "name": "Draft edit survival", "owner": "Software Engineer", "type": "input", "definition": "Text similarity between an agent draft and accepted owner-edited record; a data-quality diagnostic, never acceptance evidence.", "formula": "1 - codepoint_levenshtein(draft, accepted) / max(codepoint_lengths); identical empty pair = 1", "unit": "fraction; register normalization and artifact versions", "collection": "Local draft-quality command emits only digests, counts and edit distance; record drafting session time separately.", "cadence": "Per calibration/record; weekly aggregate review", "gaming": "Selecting easy seeds/controls or drafts; omitting failed attempts or unknown results.", "anti_gaming": "Freeze versioned inclusion rules; report all eligible cases, missingness and source coverage; no individual ranking.", "limits": "Sample- and configuration-specific. No statistical independence, general correctness or causal benefit follows from this metric alone.", "paired_with": [ "contract-hours", "contract-drift" ], "evidence_floor": "E0 for synthetic exercises; E2 requires a recorded local baseline; E3 requires preregistered comparison and causal caveats.", "claim_id": "CE-METRIC-01" }, { "id": "waiting-share", "name": "Waiting share of delivery lead time", "type": "input", "owner": "Engineering Leader", "definition": "Share of lead time in any registered waiting state; translation share is a subset.", "formula": "100 × union_duration(waiting_intervals) / (production_exposed_at - intent_ready_at)", "unit": "percent; undefined for nonpositive lead time", "collection": "Workflow transitions joined to original Intent Ready and actual production exposure; merge overlapping intervals.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "delivery-lead-time", "escaped-defects" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" }, { "id": "change-failure-rate", "name": "Change failure rate", "type": "guardrail", "owner": "Operations Owner", "definition": "Admitted changes causing a registered service-impacting failure within the fixed follow-up window.", "formula": "failed_admitted_change_ids / all_eligible_admitted_change_ids", "unit": "fraction and raw counts", "collection": "Deployment/incident links using preregistered failure/severity definitions; keep unresolved attribution explicit.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "delivery-lead-time", "review-latency" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" }, { "id": "rollback-frequency", "name": "Rollback frequency", "type": "guardrail", "owner": "Operations Owner", "definition": "Admitted deployments requiring rollback within the registered window, distinct from severity.", "formula": "rolled_back_deployment_ids / eligible_deployment_ids", "unit": "fraction and raw counts", "collection": "Deployment controller recovery events and incident attribution; include aborted exposure under declared rules.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "rollback-severity", "outcome-rate" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" }, { "id": "contract-change-frequency", "name": "Contract change frequency", "type": "input", "owner": "Software Engineer", "definition": "Material accepted revisions per linked initiative and observation window.", "formula": "material_revision_count / eligible_initiative_count", "unit": "revisions per initiative; undefined with no eligible initiatives", "collection": "Immutable record supersession events; separate justified discovery revisions from reconciliation-only changes.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "contract-hours", "contract-drift" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" }, { "id": "evidence-invalidation-frequency", "name": "Evidence invalidation frequency", "type": "input", "owner": "Verification Owner", "definition": "Previously accepted bundles invalidated by material input/policy/identity/environment changes.", "formula": "invalidated_bundle_ids / eligible_accepted_bundle_ids", "unit": "fraction and raw counts", "collection": "Versioned invalidation events with trigger and downstream affected-artifact links.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "escaped-defects", "review-latency" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" }, { "id": "maintainer-comprehension", "name": "Maintainer comprehension", "type": "guardrail", "owner": "Engineering Leader", "definition": "Team-level ability to reconstruct rationale, allowed effects and failure response from a fixed maintenance task.", "formula": "distribution of blinded rubric scores and completion time; register rubric before intervention", "unit": "rubric distribution, task count and elapsed time", "collection": "Consented team-level maintenance exercise with independent rubric scoring and comparable tasks.", "cadence": "Collect per event/exercise; review weekly inputs and at registered output horizon", "gaming": "Changing cohort/window or omitting incomplete, adverse or unlinked observations.", "anti_gaming": "Freeze definitions/denominators; report missingness, severity and all eligible cases; no individual evaluation.", "limits": "Context- and cohort-specific; distinguish description from causal claims and follow maintenance after special pilot support ends.", "paired_with": [ "contract-hours", "rework-tax" ], "evidence_floor": "E0 for definitions and synthetic examples; E2 needs recorded local baseline, E3 a preregistered comparison and explicit causal limits.", "claim_id": "CE-METRIC-01" } ], "example": { "label": "Synthetic token-expiry bug fix; not a measured deployment or enforcement engine.", "records": [ { "schema_version": "0.1", "kind": "IntentContract", "id": "intent/token-expiry", "revision": "r1", "status": "illustrative", "owner": "product-and-engineering", "created_at": "2026-10-20T00:00:00Z", "problem": "Synthetic reproduction: an access token remains usable at its expiry boundary.", "behavior": "A token is expired when elapsed_seconds >= ttl_seconds.", "ttl_seconds": 30, "acceptance_cases": [ { "age_seconds": 0, "expired": false }, { "age_seconds": 29, "expired": false }, { "age_seconds": 30, "expired": true }, { "age_seconds": 31, "expired": true } ], "invariants": [ "No change to token format, signing keys, or authorization scopes." ], "change_tier": "lightweight", "observation": { "horizon_days": 7, "criterion": "No attributable boundary-expiry regression in the declared monitoring window." }, "decision_ref": "Reuse the accepted token-expiry policy; create an ADR only if that decision changes.", "digest": "sha256:08b8d0beb64fae6c028e8b944c7c361713724e47260851089e7c04c52c99a7c6" }, { "schema_version": "0.1", "kind": "IntentContract", "id": "intent/token-expiry", "revision": "r2", "status": "illustrative", "owner": "product-and-engineering", "created_at": "2026-10-20T00:00:00Z", "problem": "Synthetic reproduction: an access token remains usable at its expiry boundary.", "behavior": "A token is expired when elapsed_seconds >= ttl_seconds.", "ttl_seconds": 60, "acceptance_cases": [ { "age_seconds": 0, "expired": false }, { "age_seconds": 59, "expired": false }, { "age_seconds": 60, "expired": true }, { "age_seconds": 61, "expired": true } ], "invariants": [ "No change to token format, signing keys, or authorization scopes." ], "change_tier": "lightweight", "observation": { "horizon_days": 7, "criterion": "No attributable boundary-expiry regression in the declared monitoring window." }, "decision_ref": "Reuse the accepted token-expiry policy; create an ADR only if that decision changes.", "digest": "sha256:6b9349b8a036ce1054326444a94e0949e10bb7bd75b0ea8a91e40a00f903af77" } ], "projections": [ { "id": "view/prd", "audience": "Product", "owner": "Intent owner", "source": "Selected compact Intent revision", "staleness": "Re-render when selected ID/revision/digest changes." }, { "id": "view/executive", "audience": "Leadership", "owner": "Outcome owner", "source": "Selected compact Intent revision", "staleness": "Re-render when selected ID/revision/digest changes." }, { "id": "view/tests", "audience": "Verification", "owner": "Verification owner", "source": "Selected compact Intent revision; draft assertions only", "staleness": "Re-render when invariant or acceptance cases change; accepted test plans also need Evidence policy." } ] }, "reference": { "status": "experimental demonstrator, not production hardened", "format_version": "reference-0.1", "archive_path": "/downloads/concerted-engineering-reference.zip", "files": { "LICENSE": "191f9456f1910225e47907bd2a2578798fb9f0960d002ff9a9d477f40d66716e", "README.md": "9ae992c9a4ac75374a4699a79a1be50814177c7042dc4e7c9eaba5ede7f53cb1", "check-release.mjs": "30ecc03a8a34824f9a2a60b81a000ce030964da02e9b1f5bc2ddde6c0a765c78", "control-demo.mjs": "3a5242e4ccc8ac9e4aaf3f3575c19c240f881a4917e790b04fa162d7281c71e5", "control-kernel.mjs": "eaa58bb774a597de842467b85da16f9aa292de84894b8924dedd28cd645e9cb8", "control-kernel.test.mjs": "a3893f3ab047eac8d9965f4c01a4e0a8143c99cdd5019038a4e6e2a6ef8f0860", "fixture.mjs": "c0ee684949522db28a8931e0d67962ad7f003261cf28f9ea2f84862eb1b81839", "lifecycle-policy.json": "2a6e19b65e36eae168a963c08c67a48494140a6edfee57f71e3c0c70e4791784", "pilot-tools.mjs": "3aae3f8396616637d5ba96ff3beb85bf639b2b53fa0e98d32a32c4207ee9cc94", "pilot-tools.test.mjs": "c7c0c81ac9a8beafbab1846d11d39fa16362f82e1e8027ff94cdb797b5316bd6", "projection-demo.mjs": "c9fa3dfd1183383532e9a2cb87d8e238c3259ae78d2df8f89195850b6fbebe7f", "projection-example.json": "d8c4f27735e364b667ec3618ff388ec17fdae247060de34ab498b5a02ea78c1a", "projection-tools.mjs": "7e4494b2594bd6f6d66635d287735c8a35d3511b905cca8a6f5015d545dfc36d", "projection-tools.test.mjs": "e198c20a77dffd29fe160b08b62a03d2bcb942a977c67f0031489346e387eadc", "reference.test.mjs": "8b58c31024b2bef6cecf5c0f0e77cab0c6d90a89d3246345fffe7c4413bb6137", "release-inputs.schema.json": "b6bca62023126e6b2877861bc096a648dff6fcb4f9505fe1dc9bf0cf1d9d3fdb", "seeded-defects.mjs": "bb301eb0c3f6eebe2e8add5e65e820f6af1b8dec8e6324351bd5b6be3960ca5c" }, "archive_sha256": "8fbcabed8e7899e9c360b7d2b0b40fdcd2cf4007f886939ee0910a13bc1f6d89" }, "spec_version": "0.3.1-draft.1", "tenets": [ "Begin with a measurable customer or explicitly bounded research problem.", "Maintain one authoritative accepted revision of intent; preserve superseded history.", "Separate desired outcomes and hard invariants from implementation instructions.", "Grant the smallest necessary, expiring execution authority.", "Generation cannot control protected verification policy, evidence signing or admission.", "Evidence applies only to the exact artifact and governing revisions assessed.", "Material change invalidates affected plans and evidence.", "Prefer reversible decisions and progressive exposure.", "Every contract, signal and exception has a named accountable human owner.", "Measure verified customer outcomes and total system cost, not generated activity.", "Production observation is part of verification.", "Exceptions are explicit, scoped, temporary, recorded and independently reviewed." ], "roles": [ { "name": "Product Manager", "responsibility": "Customer intent and outcome hypotheses; a named delegate may fulfill the responsibility.", "metaphor": "Conductor of customer intent" }, { "name": "Software Engineer", "responsibility": "Bounded implementation and routine reversible decisions.", "metaphor": "Performer" }, { "name": "Verification Owner", "responsibility": "Independent acceptance oracles, required evidence and substantiated release blocks.", "metaphor": "Independent listener" }, { "name": "Principal Engineer", "responsibility": "Architecture, cross-boundary decisions and first arbitration.", "metaphor": "Section lead" }, { "name": "Engineering Leader", "responsibility": "Capacity, incentives, escalation and funded verification.", "metaphor": "Ensemble leader" }, { "name": "Agent", "responsibility": "Scoped delegated work; no self-admission or policy authority.", "metaphor": "Assisted performer" }, { "name": "Stakeholder", "responsibility": "Customer evidence, domain constraints and outcome interpretation.", "metaphor": "Audience" }, { "name": "Operations Owner", "responsibility": "Independent production admission, exposure, halt and recovery.", "metaphor": "Live sound and recovery" } ], "glossary": [ { "term": "Intent Contract", "definition": "Customer evidence, outcome hypotheses, behavioral acceptance criteria, and hard invariants owned by Product and Engineering.", "disallowed_synonyms": [] }, { "term": "Execution Contract", "definition": "Authenticated principal, delegation, allowed effects, isolation, network access, resource limits, and recovery owned by Engineering and Platform.", "disallowed_synonyms": [] }, { "term": "Evidence Contract", "definition": "Independently owned required checks, protected harnesses, trusted identities, thresholds, and finite freshness limits. This is a policy, not observed results.", "disallowed_synonyms": [] }, { "term": "Evidence Bundle", "definition": "Observed results bound to exact inputs, artifact, identities and validity window; distinct from required checks.", "disallowed_synonyms": [ "Evidence Contract as proof" ] }, { "term": "Separation of duties", "definition": "Distinct protected authorities for generation, verification policy and admission; no statistical-independence guarantee.", "disallowed_synonyms": [ "topological safety" ] }, { "term": "Analyze and decide", "definition": "Final pilot phase: assess cost, safety and outcomes, then stop, refine or expand.", "disallowed_synonyms": [ "scale automatically" ] }, { "term": "Shared score", "definition": "An explanatory metaphor for versioned engineering state; not another contract type.", "disallowed_synonyms": [] } ], "evidence_levels": [ { "id": "E0", "label": "Illustrative / design default", "meaning": "Synthetic scenarios, proposed thresholds and observation windows; never observed results." }, { "id": "E1", "label": "Anecdote", "meaning": "Attributed account without a standardized baseline; consent required." }, { "id": "E2", "label": "Observed", "meaning": "Recorded baseline and before/after measurement; no control, no causal claim." }, { "id": "E3", "label": "Controlled", "meaning": "Preregistered matched or randomized/staggered comparison; state design and causal limits." }, { "id": "X", "label": "External", "meaning": "Third-party study; cite the primary source and its causal limits." } ], "tiers": [ { "id": "T0", "name": "Routine low impact", "eligibility": "Reversible, no runtime/security/data/API/dependency behavior change; never classify by diff size alone.", "intent": "Parent accepted intent/ticket plus exact references", "execution": "Inherited approved repository policy", "evidence": "Protected standard checks and current bindings", "adr": "Only if a significant decision changes", "budget": "E0 default: no additional bespoke form; actual effort is measured, never assumed zero.", "approval": "Human-confirmed eligibility under an approved routine policy" }, { "id": "T1", "name": "Bounded reversible", "eligibility": "Single service, recoverable in one deploy, no material data/API/auth boundary change.", "intent": "Problem, behavior/invariants, outcome window, risk/tier and owner; inherit exact references", "execution": "Accepted service profile plus narrow scope delta", "evidence": "Default checks plus independent targeted oracle", "adr": "Only if a significant decision changes", "budget": "E0 default: 15 minutes active authoring; two weekly overruns trigger simplification review.", "approval": "Named engineer within preapproved delegation; no standing meeting" }, { "id": "T2", "name": "Material coordinated change", "eligibility": "Customer-visible behavior, multiple services, schema/API effects, or changed important assumptions.", "intent": "Full record plus customer announcement and FAQ", "execution": "Explicit permissions, limits, rollback and owner", "evidence": "Independent owner-approved oracles, diverse methods and rollout stops", "adr": "For new or changed significant decisions", "budget": "E0 default: 2 hours authoring, excluding assurance work; re-register locally.", "approval": "Human tier confirmation and affected owners" }, { "id": "T3", "name": "High consequence", "eligibility": "Irreversible migration/deletion, removed public API, security boundary or hard-to-recover effect.", "intent": "Full record, customer announcement/FAQ and narrative risk memo", "execution": "T2 plus demonstrated recovery or explicit irreversible-effect constraints", "evidence": "Independent cross-team expert review, sandbox fault exercise and approved risk controls", "adr": "Principal-reviewed decision record for the significant decision", "budget": "Assurance-driven; no time target overrides a required check.", "approval": "Human tier confirmation, Principal Engineer and independent risk/admission owners" } ], "decision_rights": [ { "decision": "Intent approval", "decides": "Product Manager and accountable engineering owner", "consulted": "Verification Owner; Stakeholder", "informed": "Operations Owner" }, { "decision": "Tier assignment", "decides": "Delegated Software Engineer for T0/T1; human affected owners for T2/T3", "consulted": "Principal Engineer; Verification Owner", "informed": "Operations Owner" }, { "decision": "Scope expansion", "decides": "Execution owner with affected Intent/risk owners", "consulted": "Verification Owner; Operations Owner", "informed": "Engineering Leader" }, { "decision": "Evidence policy change", "decides": "Verification Owner plus separate risk owner; no self-approval", "consulted": "Principal Engineer; Operations Owner", "informed": "Product Manager; Software Engineer" }, { "decision": "Release admission", "decides": "Independent Operations Owner / protected service identity", "consulted": "Verification Owner", "informed": "Product Manager; Engineering Leader" }, { "decision": "Halt and rollback", "decides": "Named Operations/incident owner under preapproved recovery policy", "consulted": "Verification Owner; Software Engineer", "informed": "Engineering Leader; Stakeholder" }, { "decision": "ADR supersession", "decides": "Accountable decision owner; Principal review for T3", "consulted": "Affected owners; recorded dissenters", "informed": "Engineering Leader" } ], "maturity": [ { "id": "L0", "name": "Assisted", "autonomy": "Agents suggest; humans commit. Human/mentor-authored invariants.", "exit": "Named service owner/runbook, working CI, recorded baseline and explicit risk requirements." }, { "id": "L1", "name": "Supervised", "autonomy": "Sandbox PRs; human review and admission. Mentor-owned evidence.", "exit": "Demonstrated denied effects, risk-appropriate check adequacy, recovery exercise and stable safety window." }, { "id": "L2", "name": "Bounded", "autonomy": "Enforced scopes; human review of diffs and independently collected evidence.", "exit": "Seeded-defect catch floor and overhead budget met with declared sample/coverage; no unresolved hard gap." }, { "id": "L3", "name": "Concerted", "autonomy": "Pull within accepted priorities and finite delegations; protected admission remains separate.", "exit": "Sustained preregistered guardrails for an agreed period; regression revokes autonomy." } ], "specification": { "archive_path": "/downloads/concerted-engineering-spec.zip", "directory": "concerted-engineering-spec", "status": "experimental; field exit criteria pending", "license": "CC-BY-4.0 for original specification material; MIT for reference code", "files": { "LICENSE.md": "adba33e8d6bc5a5d9ef6effd96782882927ac31eb7199a6e4fac564a34c87f1b", "README.md": "9cee578873fcb400bdccfdb2a3d944c8fadee18f1c8323bcadfe8442db0f6b5b", "adoption-path.yaml": "c3957fd3d3102ad97d3b5068dcfdc266ebf267a53690231740cb112ce2d727a7", "agile-adoption.yaml": "2edec4ca3b5d34b66518175a70c552bd6dfc55f1be9620ee0e39221f531a7bba", "assurance-by-tier.yaml": "2e721d2572544012ac8f97ebf04c1783831185ba4f655f56a605014745ba85d3", "assurance-levels.yaml": "74517d7e32aafb8283664e888b1fffbd8ceff3325d927635632d27cad20b7ef8", "assurance.md": "b06d03440f1551f801911cc96a2b95aae3d6476d454ca4deb75d9e85339931c9", "change-control.json": "d9b852155a28c1897688b7a831db9ffd981c42cdc5d3f333bb0d3c3915bd2ba1", "claims.md": "2ce2be77cbfb9eea244320147aa01adab8bbc1aad1f8aec85a51e0fce185e31c", "claims.yaml": "c50abb5667b9b8d670292e5d24be5f7e297185267e4f274464f2950232a52454", "contract-change-policy.yaml": "ba9f4ea181b28105ce9ad2dad79d8a449c382ef71701d7e26b74ef3c1644eedb", "contracts/AdmissionRecord.schema.json": "4b6d5990276c24282b67970a2676c9190313364812d782c8f428cb2ecf8c666e", "contracts/DecisionRecord.schema.json": "48fd0ae07646a01faa61128899be32e29d92e478cc96bbaa8ef11a7072e63588", "contracts/EvidenceBundle.schema.json": "c6fcd80ad4a341eb5c017cb59f921bfb141d792ab512d81647e5a03e72b8730b", "contracts/EvidenceContract.schema.json": "193399ca57d848d4bc84227a0d9b0303b0f86f8a83ef10f9e8e8cf815f9a3563", "contracts/ExceptionRecord.schema.json": "9608412010336284eab7eb9f0a14c742a2d808625aae0707b17315f648fc9c62", "contracts/ExecutionContract.schema.json": "37228164c0674af325f84d8dd2aada5bf4d462c1a765b24cdac0c476bf35e5ef", "contracts/IntentContract.schema.json": "5e40a4bf3cb73771be5f0d0b021b4bdbc3b33d601568e7427795a5c3d640e25b", "control-model-E0.json": "7e15b681b1db016cbf5ca32fd90613f8f925f331ab97f754896eb7496f947738", "corrections.yaml": "1d0003403dc50ddb9f84fdb03047e0e898487d3ebbf1552bcc0a7a7fd5a81658", "decision-rights.yaml": "f42bfc008ec84d348c0162958c95b767f5248dc57585fa66c733a91baac97191", "decisions/0004-remediation-governance.md": "6f81d10d077f004f223846f2a14c683edf074c7b4e47cdaae52d3b928adefd44", "decisions/0005-lifecycle-claims-and-trust.md": "e19d1e0223fc3ba59201f378541a2ae020ead05287ace60f52a916a44deca88f", "decisions/0006-projection-lineage-and-incremental-adoption.md": "7334e991b73b982e5bb3ce4e1dfa7c6f985e75e9406e02e2bfdf2a11e4faa0c0", "evidence-levels.yaml": "784f38b0c4a4a31c442e5cb2764aa6193ce25ab4a0c08f18f6b776e73cb33cb0", "glossary.yaml": "1cec0cfe6e655c983d3012e8c09bef832f87229e3fea50f72a3f593cb207629a", "governance.md": "3247e5ad91a7fdd29564355981f494241a00375ac60c6294cc0eb4e27054ddaf", "maturity.yaml": "41160f9021b2a11d175a49b96ed32699ab1d096efbcd115eff033df0aecf24aa", "metrics.yaml": "259670e0aea6fe7bf2bc4c0cbdcdcfd50b80b2b27c277ad858b02dd9dc28f4a4", "positioning.md": "a9d8f7fa63690e4682c396ce3a7f26e939e1fce2f87903f25e4eac39ae948a28", "projection-model-E0.json": "9aea67457154b6bad5fea8f10feee0c1a39031bfc951a3ebceb00eea2b9cf11d", "projection-policy.yaml": "ac49aed19c1bbe72c0e8573d7804485627ffac4b2380d862f787a75642080965", "revision-history.yaml": "bfbbd6db2235143cbc323b6666157602767e87a513acdf546ceb852bc4630e46", "roles.yaml": "4c604935009a700eb95152bd4b77c0b35010df6f87353da3836a26fc38189cd9", "seeded-defects-E0.json": "3790d95102704656b284deab1bf0ea8124c67eba415c12b44b3ccb909533c2de", "spec.md": "92b60b86deff3b7fd9148ac6afa1ebbecb1f73a72863e8efe38d957cd98311f9", "state-machine.yaml": "8a4181a7a548fa5f65d87ec6c9d6cfbae5db542d630d3cc380027d1c48c26e9c", "templates/drift-snapshot.json": "14073b6cc4e5e0aa9d3bfffd8feb57580b3f814ef8e3b129dc960647ed4b1c40", "templates/evidence-seed.json": "471309805dea7794686058658a3067efb01c773f6b385edd6b56497a7a84ef79", "templates/execution-seed.json": "933632b0e35ef4c0a1aa0a36cd9be747679cf3f9cbdbbe16e6c3a6697af35b35", "templates/intent-seed.json": "94f0894b22483044643945d34d861832d96f60893a6343b63a6d4712287661de", "templates/measurement-coverage.json": "8aa61ed84bf42aac6bb68e07ff5f80be871acc01c144cd5538e0d7a222728cff", "templates/pilot-data-sheet.md": "5d9f98ccd7aabc61a8a44ed3caeac857b7e00a04693453f60b418e6fb1f5a7e1", "templates/preregistration.json": "df1491350b44702da10bd670e94d5acf859e117300d7732220ea3f1ddb58d1e4", "templates/protected-ci.example.md": "f87e1429a0ea56cb53bb3daa046bf0dbd7de22b5635d19c55940f19212735d3a", "templates/review-and-decision.md": "91c8f9bb429445cdd62dc1a7829fb28ee22ff46438a6b4b0223ce597c42ad34d", "templates/working-backwards.md": "e022c2dc5b4a928f01a3b0f4a9218921ccf1fe0cf972c6fbfe231b1f6288325e", "tenets.md": "cd7d2bfecd43608e84cbad93f688017c7e06b6ab399d19240a7d2b6bc0394dad", "tiers.yaml": "2283d51a1f26536bbb09b5e83f53f1727a2e54f4ddb79369ca68e1541a796f01" }, "archive_sha256": "14bed780d6760760437e452569c23d284854f806fbd04941ad4f4ec7058c01b6" }, "failure_modes": [ { "id": "review-overload", "title": "Review overload", "text": "Generated candidates exceed independent verification capacity; measure waiting, active review and escaped defects." }, { "id": "contract-bureaucracy", "title": "Contract bureaucracy", "text": "Authoritative records drift or duplicate work; measure upkeep and retire only replaced artifacts." }, { "id": "governance-bottlenecks", "title": "Governance bottlenecks", "text": "Universal approval committees delay reversible changes; delegate within protected boundaries." }, { "id": "priority-churn", "title": "Priority churn and lost rationale", "text": "Assumptions and priorities reset without recorded evidence; retain and supersede decisions explicitly." }, { "id": "metric-gaming", "title": "Metric gaming", "text": "Volume and speed targets conceal cost, risk and missing outcomes; use paired team-level diagnostics." }, { "id": "correlated-verification", "title": "Correlated verification failures", "text": "Shared assumptions, models or administrators defeat nominal independence; protect oracles and exercise realistic seeded defects." } ], "pilot_phases": [ "Baseline and controls", "Bounded execution", "Analyze and decide" ], "change_control": { "record": "change-control.json", "adr": "decisions/0006-projection-lineage-and-incremental-adoption.md" }, "non_goals": [ "Replace project management or prescribe sprint cadence.", "Eliminate human discussion or judgment.", "Guarantee correctness or certify compliance.", "Require autonomous execution.", "Require a particular tool, vendor or file format." ], "assurance_levels": [ { "id": "A0", "name": "Generator-controlled evidence", "requirement": "Useful candidate evidence; cannot satisfy independent admission alone." }, { "id": "A1", "name": "Protected checks", "requirement": "Generator can invoke but cannot modify the required checks, policy, result collector or signing credentials." }, { "id": "A2", "name": "Independent verification", "requirement": "Separate authenticated identity, policy owner, credentials, runner and controlled test data; admission remains independent." }, { "id": "A3", "name": "Diverse assurance", "requirement": "Risk-appropriate adversarial/property/differential/fault/formal or expert assurance in addition to protected ownership." } ], "assurance_by_tier": { "T0": [ "A1" ], "T1": [ "A1", "A2" ], "T2": [ "A2", "A3" ], "T3": [ "A2", "A3", "explicit independent human authorization" ] }, "state_machine": { "states": [ "Proposed", "Intent Ready", "Execution Authorized", "Candidate Produced", "Evidence Complete", "Admitted", "Deploying", "Observed", "Outcome Reviewed", "Closed", "Superseded" ], "failure_states": [ "Blocked", "Expired" ], "transitions": [ { "id": "TR-01", "from_state": "Proposed", "to_state": "Intent Ready", "actor_role": "intent_owner", "preconditions": [ "approved_intent", "named_owners", "classified_invariants" ], "required_input": "Exact governing records and accepted intent revision", "resulting_artifact": "Accepted Intent revision", "required_evidence": "independent requirements/oracle review", "failure_state": "Blocked", "timeout_key": "intent_review", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "technical_owner", "reversible": true }, { "id": "TR-02", "from_state": "Intent Ready", "to_state": "Execution Authorized", "actor_role": "execution_owner", "preconditions": [ "current_contracts", "bounded_grant", "stop_and_recovery" ], "required_input": "Exact governing records and execution authorization with finite grant", "resulting_artifact": "Execution authorization with finite grant", "required_evidence": "protected permission/isolation validation", "failure_state": "Blocked", "timeout_key": "authorization_review", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "technical_owner", "reversible": true }, { "id": "TR-03", "from_state": "Execution Authorized", "to_state": "Candidate Produced", "actor_role": "executor", "preconditions": [ "current_contracts", "live_execution", "actual_artifact" ], "required_input": "Exact governing records and candidate/source/build binding", "resulting_artifact": "Candidate/source/build binding", "required_evidence": "actual artifact digest and source provenance", "failure_state": "Expired", "timeout_key": "execution", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "execution_owner", "reversible": true }, { "id": "TR-04", "from_state": "Candidate Produced", "to_state": "Evidence Complete", "actor_role": "verification_owner", "preconditions": [ "current_contracts", "verified_receipts", "assurance_profile" ], "required_input": "Exact governing records and evidence bundle", "resulting_artifact": "Evidence Bundle", "required_evidence": "fresh protected independently signed results", "failure_state": "Blocked", "timeout_key": "verification", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "verification_owner", "reversible": true }, { "id": "TR-05", "from_state": "Evidence Complete", "to_state": "Admitted", "actor_role": "admission_authority", "preconditions": [ "current_contracts", "verified_receipts", "assurance_profile", "stop_and_recovery", "valid_exceptions" ], "required_input": "Exact governing records and admission decision", "resulting_artifact": "Admission decision", "required_evidence": "exact artifact, current policy/refs, independent authority and valid recovery", "failure_state": "Blocked", "timeout_key": "admission", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "operational_owner", "reversible": false }, { "id": "TR-06", "from_state": "Admitted", "to_state": "Deploying", "actor_role": "operational_owner", "preconditions": [ "current_contracts", "verified_receipts", "admission_matches", "stop_and_recovery" ], "required_input": "Exact governing records and deployment start record", "resulting_artifact": "Deployment start record", "required_evidence": "same admitted digest; target-state preconditions", "failure_state": "Blocked", "timeout_key": "deployment", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "operational_owner", "reversible": false }, { "id": "TR-07", "from_state": "Deploying", "to_state": "Observed", "actor_role": "operational_owner", "preconditions": [ "deployment_matches", "production_signals" ], "required_input": "Exact governing records and production observation record", "resulting_artifact": "Production observation record", "required_evidence": "registered exposure/error/recovery signals; no missing data converted to pass", "failure_state": "Blocked", "timeout_key": "observation", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "operational_owner", "reversible": false }, { "id": "TR-08", "from_state": "Observed", "to_state": "Outcome Reviewed", "actor_role": "outcome_owner", "preconditions": [ "outcome_window_complete", "outcome_review" ], "required_input": "Exact governing records and outcome review", "resulting_artifact": "Outcome review", "required_evidence": "raw counts, missingness, cost, negatives and invariant outcomes", "failure_state": "Blocked", "timeout_key": "outcome_review", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "intent_owner", "reversible": false }, { "id": "TR-09", "from_state": "Outcome Reviewed", "to_state": "Closed", "actor_role": "intent_owner", "preconditions": [ "closure_record" ], "required_input": "Exact governing records and closure record", "resulting_artifact": "Closure record", "required_evidence": "named owner decision and residual follow-up", "failure_state": "Blocked", "timeout_key": "closure", "timeout_behavior": "Finite registered timeout; pause and record failure/escalation; never auto-approve.", "escalation_role": "technical_owner", "reversible": false } ], "supersession": { "actor_role": "intent_owner", "preconditions": [ "superseding_revision", "affected_owners_notified", "operational_handoff_if_live" ], "result": "Superseded with immutable predecessor and explicit live-work handoff; no deletion or silent rewind." }, "timeout_policy": "Every timeout key requires finite positive seconds and a named escalation owner before execution. Outcome timing follows a registered horizon. A timeout records a blocked/expired outcome without granting authority." }, "claims": [ { "id": "CE-DEF-01", "claim": "The proposal complements adaptive delivery and links intent, authority, evidence, admission and outcomes.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/standard/", "/assurance/" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "A proposed synthesis, not a new invention or empirically established improvement.", "status": "current" }, { "id": "CE-HYP-01", "claim": "Shared state may reduce translation and rework enough to offset total upkeep.", "classification": "hypothesis", "evidence_quality": "E0", "supporting_sources": [ "/metrics/", "/downloads/90-day-adoption-blueprint.md" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "No completed controlled or before/after pilot dataset is supplied.", "status": "current" }, { "id": "CE-CTRL-01", "claim": "The proposed profile forbids generator control of protected policy, signing and admission.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/assurance/#authorization-boundaries", "/standard/" ], "owner": "Verification Owner", "last_reviewed": "2026-10-20", "limitations": "A requirement; actual IAM/runner enforcement and graph completeness require independent implementation.", "status": "current" }, { "id": "CE-LIFE-01", "claim": "The local kernel checks declared lifecycle guards, expiry, expected revision and signed release bindings.", "classification": "illustration", "evidence_quality": "E0", "supporting_sources": [ "/downloads/concerted-reference/control-kernel.mjs", "/downloads/concerted-reference/control-kernel.test.mjs" ], "owner": "Tooling owner", "last_reviewed": "2026-10-20", "limitations": "Synthetic/local behavior only; no authenticated service, distributed store or deployment actuator.", "status": "current" }, { "id": "CE-TRACE-01", "claim": "Immutable event identities and explicit graph relations support traceable role-specific projections.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/assurance/#traceability-and-invalidation" ], "owner": "Tooling owner", "last_reviewed": "2026-10-20", "limitations": "The local hash chain is tamper-detecting given a trusted checkpoint; no durability, authentication or complete system discovery guarantee.", "status": "current" }, { "id": "CE-OBS-01", "claim": "The author qualitatively observed less dispatch in a predecessor AWS setting.", "classification": "observation", "evidence_quality": "E1", "supporting_sources": [ "https://www.openkedge.io/blog/beyond-agile-ai-native-software-engineering#autonomy-in-practice" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Uncontrolled account; no measured baseline, denominator, effect size or model validation.", "status": "current" }, { "id": "CE-X-01", "claim": "External AI/delivery research motivates investigation and has context-specific causal limits.", "classification": "established practice", "evidence_quality": "X", "supporting_sources": [ "https://dora.dev/research/2025/dora-report/", "https://metr.org/blog/2025-07-10-early-2025-ai-experienced-os-dev-study/", "https://metr.org/blog/2026-02-24-uplift-update/" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "External research does not evaluate the complete operating model.", "status": "current" }, { "id": "CE-X-02", "claim": "GitClear observational churn analysis is not causal evidence for this operating model.", "classification": "observation", "evidence_quality": "X", "supporting_sources": [ "https://www.gitclear.com/coding_on_copilot_data_shows_ais_downward_pressure_on_code_quality" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Projection and observed periods remain distinguished; code churn is not equivalent to customer harm.", "status": "current" }, { "id": "CE-ILL-01", "claim": "The token-expiry and routing walkthroughs illustrate requirements and checks.", "classification": "illustration", "evidence_quality": "E0", "supporting_sources": [ "/standard/#derived-views", "/#process" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Synthetic. The unsupported percentage-improvement narrative was removed in this revision.", "status": "current" }, { "id": "CE-PILOT-01", "claim": "Pilot windows, budgets, tier thresholds and review clocks are proposed planning parameters.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/governance/", "/downloads/90-day-adoption-blueprint.md" ], "owner": "Pilot lead to assign", "last_reviewed": "2026-10-20", "limitations": "Preregister and adapt to risk; no universal affordability, adoption or performance threshold is established.", "status": "current" }, { "id": "CE-METRIC-01", "claim": "Metric cards define collection, formula, owners, counter-metrics and limits.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/metrics/" ], "owner": "Metrics owner to assign", "last_reviewed": "2026-10-20", "limitations": "Definitions are not observations; historical coverage and comparable estimates remain unavailable.", "status": "current" }, { "id": "CE-ASSURE-01", "claim": "Assurance classes A0–A3 describe control diversity separately from publication evidence E0–E3/X.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/assurance/#assurance-classes" ], "owner": "Verification Owner", "last_reviewed": "2026-10-20", "limitations": "A declared classification does not prove statistical independence or installed authority separation.", "status": "current" }, { "id": "CE-GOV-01", "claim": "Named human responsibilities, temporary exceptions and protected escalation are required.", "classification": "design principle", "evidence_quality": "E0", "supporting_sources": [ "/governance/", "/assurance/#exceptions-and-recovery" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Pilot appointments and observed operational enforcement remain pending.", "status": "current" }, { "id": "CE-PRACTICE-01", "claim": "Adaptive delivery, ADRs, policy controls, provenance and independent certification have precedents.", "classification": "established practice", "evidence_quality": "X", "supporting_sources": [ "https://agilemanifesto.org/principles.html", "https://adr.github.io/", "https://slsa.dev/spec/v1.2/", "https://doi.org/10.1109/MS.1987.231413" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "The proposed linkage and its net benefit remain unproven; no superiority or first-invention claim.", "status": "current" }, { "id": "CE-STATUS-01", "claim": "Operational completeness and independent adopter reproducibility remain unestablished.", "classification": "observation", "evidence_quality": "E0", "supporting_sources": [ "/claims/#limitations-and-open-exits" ], "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "No independent implementation study or E2+ pilot result is supplied; local tests establish only tested software behavior.", "status": "current" }, { "id": "CE-PROJ-01", "claim": "Purposeful audience projections need explicit owners, exact source lineage and drift checks; the local reference inspects supplied links, not semantic correctness.", "classification": "design principle", "supporting_sources": [ "/implementation/#projection-registry-and-contract-lint" ], "evidence_quality": "E0", "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Proposed mechanism and constructed local checks; no measured adoption cost, independent field implementation or pilot effect is established.", "status": "current" }, { "id": "CE-ADOPT-01", "claim": "Incremental learning can precede full record authoring while existing controls, baseline collection and release requirements remain mandatory.", "classification": "design principle", "supporting_sources": [ "/implementation/#incremental-adoption-without-weaker-release-gates" ], "evidence_quality": "E0", "owner": "Method author", "last_reviewed": "2026-10-20", "limitations": "Proposed mechanism and constructed local checks; no measured adoption cost, independent field implementation or pilot effect is established.", "status": "current" } ], "corrections": [ { "id": "COR-2026-10-20-01", "date": "2026-10-20", "claims": [ "CE-ILL-01", "CE-HYP-01" ], "change": "Removed named unsupported testimonials in prior rounds; this revision also removes the synthetic percentage-improvement narrative from current English/Chinese/Arabic walkthroughs.", "reason": "Prominent synthetic labels did not remove the risk of readers treating precise improvements as empirical results. No supporting dataset is available." }, { "id": "COR-2026-10-20-02", "date": "2026-10-20", "claims": [ "CE-ASSURE-01", "CE-LIFE-01" ], "change": "Introduced A0–A3 assurance classes, formal transitions and structural schema 0.2. Preserved publication E0–E3/X meanings and Evidence Contract versus Bundle separation.", "reason": "Avoid incompatible label meanings and conflating required checks with observed results." }, { "id": "COR-03", "date": "2026-10-20", "claims": [ "CE-HYP-01", "CE-METRIC-01" ], "change": "Define translation tax as unmanaged divergence/reconstruction, not useful audience-specific representations. Collect useful projection work separately from corrective reconciliation.", "reason": "Document diversity serves distinct decisions; eliminating useful documents is not a benefit metric." } ], "archives": [ { "version": "0.2.0-draft.1", "date": "2026-10-20", "base_path": "/downloads/versions/0.2.0-draft.1/", "manifest_sha256": "523f6abbd00029f9dcbed43501786db222cc3ed55a2c0d33595c2da18e0da889", "status": "local reviewed draft snapshot; not a deployed release" }, { "version": "0.3.0-draft.1", "date": "2026-10-20", "base_path": "/downloads/versions/0.3.0-draft.1/", "manifest_sha256": "b80f94b8de1bf802c702606360323b3a60ce66000858d4eebb0f1f6f37116a54", "status": "local reviewed draft snapshot; not a deployed release" } ], "revision_history": [ { "version": "0.2.0-draft.1", "date": "2026-10-20", "summary": "Remediation mechanisms, evidence labels, portable specification, metric accountability and experimental helpers. Snapshot retained as a local draft." }, { "version": "0.3.0-draft.1", "date": "2026-10-20", "summary": "Claims/corrections register, formal lifecycle, assurance and traceability models, structural schema migration and removal of unsupported improvement figures." }, { "version": "0.3.1-draft.1", "date": "2026-10-20", "summary": "Distinguish divergent translation from purposeful projection; add projection registry lint, staged learning, conservative contract-change handling and experimental-design refinements." } ], "projection_policy": { "principle": "Reduce unmanaged divergence, not useful translation. Audience-specific documents remain purposeful projections of shared, versioned content.", "registry_fields": [ "projection_id", "audience", "owner", "source_refs", "required_source_ids", "invariant_ids", "check_ids", "staleness_rule", "output_ref" ], "representation": "Language-agnostic content model; YAML and JSON are serializations. Edited proposals pass schema, semantic owner review and explicit supersession before acceptance.", "ownership": { "Intent": "one accountable product/intent owner; technical owners approve hard invariant changes", "Execution": "one accountable engineering/execution owner; protected policy owners retain authority", "Evidence": "one accountable verification owner independent of generation; admission remains separate" }, "limits": "The reference lints a supplied trusted snapshot. It neither discovers every document nor verifies prose, access rights or live notifications." }, "adoption_path": [ { "id": "S0", "name": "Learn the questions", "planning_window": "Weeks 1–2 (E0 optional pace)", "practice": "Use existing documents to state what should improve for the customer, what must not break, and how to tell. Keep existing controls. Capture baseline, safety and total effort before intervention.", "exit": "The last three shipped initiatives have all three answers and a named accountable owner; otherwise continue learning.", "authority": "Learning only; no new autonomous effects or release permission." }, { "id": "S1", "name": "Version a learning seed", "planning_window": "Weeks 3–6 (E0 optional pace)", "practice": "Keep a minimal IntentSeed beside existing work. A presence/link check teaches traceability; record actual upkeep and do not promise zero overhead.", "exit": "All in-scope changes link an owned seed; sample their meaning, track missingness and upkeep. A file-exists check alone does not establish release readiness.", "authority": "Seeds are not accepted schema 0.2 records. Existing human release controls continue." }, { "id": "S2", "name": "Protect independent verification", "planning_window": "Weeks 7–10 (E0 optional pace)", "practice": "Start with a small risk-selected set of critical invariants and separately owned, protected checks. Explicitly resolve all applicable release requirements before production.", "exit": "Protected policy ownership and negative mutation probes are observed; a release through existing controls has evidence outside its author’s control.", "authority": "No agent authority expansion without enforced scope and independent admission." }, { "id": "S3", "name": "Exercise execution boundaries", "planning_window": "Weeks 11–14 (E0 optional pace)", "practice": "Formalize permitted/forbidden effects, egress, credentials and budgets. Install sandbox/IAM controls before permitting any new agent effect; test in shadow/sandbox first.", "exit": "A real attempted boundary violation is blocked, recorded and independently reviewed, with recovery demonstrated. Local fixtures do not satisfy this exit.", "authority": "All applicable Intent, Execution and Evidence requirements precede consequential execution." }, { "id": "S4", "name": "Expand diagnostic views", "planning_window": "Ongoing; locally reviewed cadence", "practice": "Begin dashboards with customer outcomes and flow; retain safety, total cost, missingness and baseline collection from the start. Add other diagnostic views when collection is useful and affordable.", "exit": "Registered outcome windows, costs and safety observations support a stop/refine/expand decision, with maintenance follow-up.", "authority": "No scorecard or stage number grants production authority." } ], "contract_change_policy": { "MAJOR": "Any invariant addition/removal/redefinition or material authority, safety, data, budget or required-check change; invalidate all evidence for the affected initiative, collect named role acknowledgments and reverify before admission.", "MINOR": "Independently reviewed, compatible scope/acceptance refinement with declared impact closure; invalidate affected evidence. Unknown/ambiguous impact escalates to MAJOR.", "PATCH": "Only presentation fields outside normative semantics; prefer a separate annotation that leaves accepted bytes unchanged. A new accepted record still needs exact evidence rebinding or protected re-attestation; old signatures never silently cover it.", "churn": "Register a review window and investigation trigger. Frequent MAJOR changes prompt inquiry and visible re-verification cost, not a quota that delays a necessary safety correction.", "limits": "A version label cannot prove compatibility. The local comparator uses conservative field rules plus trusted independent review; it is not a semantic proof or release gate." }, "agile_adoption": [ [ "Stories and sprint planning", "Link existing stories to owned intent, observable outcomes and invariants; retain the team’s cadence." ], [ "Code review and CI/CD", "Declare reproducible protected checks and exact artifact/evidence links; retain review and delivery systems." ], [ "Design documents and ADRs", "Register audience-specific projections and link decisions to contract revisions and execution boundaries." ], [ "Retrospectives", "Review actual outcomes over a registered, proportionate horizon; retain learning and conversation." ], [ "Definition of Done", "Add evidence/admission requirements; use Execution Contracts specifically to scope delegated effects." ] ], "standard_view_sha256": "f34a698b0056a5bbbf32a0164ff8b1c191e5b5679e6dd48d4c1cad7a9e4b8eea", "implementation_view_sha256": "b9b205b7731e93f02e5cbfe98110fc5e93dc8f934e2a41a6820646b3feda4888", "governance_view_sha256": "7da3dbd87a8141f96186bce004b7221419bb2f0d1ea2c7ecd98b388b60ae0106", "assurance_view_sha256": "1f12490c20355ce7c127ffccfd78a82a8c558fd75b3601ae4e09d90edfd9469c", "claims_view_sha256": "9206e70ac6d7dfe691feedf50160f92f8533c028713b102ac40fabb20c9a49ed", "article_source_sha256": "c228cc037e6c5556cd8c8f55356ea8a657b9069e54af075184897f3763832b3e", "article_view_sha256": "d44628f787cb30bf50372235d77de441619d65644c819a47073c681a643408d1", "view_renderer_sha256": "82466560307261af1f4f6ffdd0ea095dd4cd060249ae1329f36f6e76e653820a", "bundle_sha256": "003b50c9d7f852a15f84d91f517430045203cff3402f790089b304f15e506947" }